[MEDIUM] firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)

PKSA-qyrk-bshg-tx6v CVE-2021-4015 GHSA-g6vq-wc8w-4g69

Affected package: grumpydictator/firefly-iii

Affected version: <5.6.5

Reported by:
GitHub